Build cyber prowess with training from renowned experts

Multiple training options to best fit your schedule and preferred learning style

Hands-On Simulations

Hands-on learning exercises keep you at the top of your cyber game

Training Events & Summits

Expert-led training at locations around the world

Demonstrate cybersecurity expertise with GIAC certifications

Free Training Events

Upcoming workshops, webinars and local events

Workforce Security and Risk Training

Harden enterprise security with end-user and role-based training

Explore common cyber career paths and the training that aligns with each

Featured CourseView All Courses

SEC504: Hacker Tools, Techniques, and Incident Handling

SEC504Offensive Operations

SEC504: Hacker Tools, Techniques, and Incident Handling

View course details Register

Get a free hour of SANS training

Experience SANS training through course previews.

Chart your path to job-specific training courses

Give your cybersecurity career the right foundation for success

Find the courses and certifications that align with our current or desired role

Training designed to help security leaders reduce organizational risk

By Skills Framework

Explore how SANS courses align with leading cybersecurity skills frameworks including NICE, ECSF and DoD 8140

Degree and Certificate Programs

Gain the skills, certifications, and confidence to launch or advance your cybersecurity career.

By Skills Roadmap

Find the right training path based on critical skills

FeaturedView all Focus Areas

Cloud Security Training

Can't find what you are looking for?

Let us help.

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders

Join the SANS Community

Become a member for instant access to our free resources.

For Organizations

Mission-focused cybersecurity training for government, defense, and education

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Talk with an expert

Talk with an expert

CWE/SANS Top 25 Most Dangerous Programming Errors

Feb 22 2010

Authored byJason Lam

Jason Lam

Last week, SANS/CWE released a top 25 dangerous programming errors list. It contains the most common errors that developers are likely to make. The intention is to raise awareness to these problems and help prioritize the order of importance for organizations new into the security game.

In the upcoming days, we will cover each of the Top 25 problems and provide some commentary on each of them. Starting today is the coverage of Cross Site Scripting.

Details on the Top 25 list can be found here.

Meet the expert

Jason Lam

Principal Instructor

Jason is a leading consultant sought after by Global 500 companies across finance, healthcare, and technology sectors worldwide. Over the years, he has led intrusion detection, penetration testing, defense improvement programs, and incident response.

Read more about Jason Lam

SANS Institute | CWE/SANS Top 25 Most Dangerous Programming Errors | SANS Institute